our SD-RED 20 with 3G/4G expansion wont fall-back to LTE connection. In the XGS config page I even can´t see if there is a LTE connection or not. SIM card is without PIN and is working with a Huawei E3372 without any issues. Setup done via WAN and work fine but if I pull out the WAN cable there is no fall-back to LTE.
Even tried with the Huawei E3372. When the WAN is connected the status LED of the Huawei shows cyan flashing every 2 seconds, which means the LTE network have been registered. After pulling WAN cable the RED is trying to reconnect but fails. After another reboot the status LED of the Huawei LTE stick changes to solid cyan (connected to LET network) but the status LED of the RED are red-green-green-green flashing all the time.
Booting up the RED without WAN with only the LTE stick in the USB port (make no difference if front or back port used) the RED is trying to connect to the XGS but fails also. The LEDs are solid green-flashing green, while LTE stick is flashing cyan. Then changes to flashing red-flashing green and LTE changes to solid cyan, and it starts again solid green-flashing green. Then again red and green flashing for some seconds and finally red-green-green-green all flashing together!
The hint with tail helped a lot, it was not the networkd.log but red-R200...xxx.log. After changing the config without the username and password (leaving blank) it worked like a charm but the blink code…
Hello Martin Nowak,Thank you for reaching out to the community, please check supported Sophos 3G/4G Module – Supported 3G/4G providers compatibility list below:> https://support.sophos.com/support/s/article/KB-000038797?language=en_US
Thanks & Regards,
Vivek Jagad | Technical Account Manager 3 | Cyber Security Evolved
Sophos Community | Product Documentation | Sophos Techvids | SMSIf a post solves your question please use the 'Verify Answer' button.
There is only one 3G/4G module available (XSGZTCH3A) and the provider is Telekom in Germany. As mentioned the LTE fall-back is not working with the module and with a Huawei E3372 stick, which is listed as compatible.
Martin Nowak, can you double check the information on the model:USB compatibility list: https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/USBCompatibilityList.html> Latest: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/Interfaces/USBCompatibilityList/index.html
The LTE stick is Huawei E3372s-153, I don´t know how to find out the IDs but similar issue have been already reported over two years ago with same hardware which worked: community.sophos.com/.../sd-red20-start-with-utms
If the hardware you mentioned you are using is correct then, you may would like to cross-verify default id or modem id as out of the three "s-153" model only one is likely to be compatible !!
Moving this thread to the Sophos Firewall (XG) Community.
Cheers - Bob
The Huawei E3372 is not the point. It was used as a test device as I can´t even see/verify the original Sophos 3G/4G module working or not as there is no such indicator in the XGS user interface with SFOS 19.0.0.
So we have now another 3 days with no update. In the meantime I tested the second SD-RED 20 with the LTE module but same result. There is no fallback to LTE when WAN is disconnected. Does this mean this option is not working at all? Even with the Huawei E3372 stick it is not working.
I am pretty sure the stick is compatible as is is displayed during the SSH console session and while WAN is connected it´s flashing the cyan LED every 2 seconds. If WAN is disconnected the RED LEDs turing some cycles and finally stay in error code "no configuration or firmware update failed" (red-green-green-green flashing) but the LTE stick LED is solid cyan which means the device is connected and registered to the 4G network!
Can you share the configuration for cellular module ?
Here it is...
Password is "tm". Also tried leaving username/password blank but then it is auto filled by the XGS. Also no luck with APN: internet.v6.telekom. As of the official information from Telekom (Germany) there is no need for username and password.
I am curious about the mobile network setting. It is a drop-down-menu but only GSM is available.